This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c6b70dc3-1272-46d7-ab2b-23f8bc752905.roa
File:                     c6b70dc3-1272-46d7-ab2b-23f8bc752905.roa (raw, json)
Hash identifier:          zm3PK7IKGt6TON7+jvrp6i0KpVR8V+knU37PrbVmDeU=
Subject key identifier:   33:5D:75:89:A5:9D:C1:54:1C:25:7C:FA:5D:19:1C:F7:49:FA:21:BC
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4E8D58C5D263AB47587B520CB924DFA74C069D05
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c6b70dc3-1272-46d7-ab2b-23f8bc752905.roa
Signing time:             Wed 31 Dec 2025 23:21:42 +0000
ROA not before:           Wed 31 Dec 2025 23:21:42 +0000
ROA not after:            Tue 31 Mar 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1eb4::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:8d:58:c5:d2:63:ab:47:58:7b:52:0c:b9:24:df:a7:4c:06:9d:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Dec 31 23:21:42 2025 GMT
            Not After : Mar 31 23:59:59 2026 GMT
        Subject: serialNumber=c755789bb4cb0ce60d201e011b177a641b578767e138aa6525ec51dae59fcdfb, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ff:15:7a:31:bc:74:32:a0:32:00:e3:90:ae:
                    af:2e:ce:07:bf:c5:f8:4d:ef:50:f3:0d:f4:2c:a3:
                    ef:f9:b3:3e:5b:4c:68:f4:ef:f4:78:2d:26:68:d4:
                    f9:9a:30:9d:7b:e5:65:98:a2:28:fb:e2:72:b1:23:
                    13:c3:48:7f:0c:e2:c5:a7:97:8f:60:5d:12:8b:3b:
                    7c:b4:28:70:6c:a6:c6:8a:81:10:db:fb:aa:b1:f7:
                    06:07:62:c4:ca:e7:06:e5:ac:11:52:8f:ac:b8:8b:
                    ed:cf:d5:a6:9d:b5:b0:29:91:ed:d7:d2:b5:26:ad:
                    87:9e:9d:a6:41:86:7f:98:18:87:a6:c4:4a:fd:b9:
                    be:cb:33:10:85:43:6f:da:3c:fb:41:8f:f9:aa:66:
                    11:8f:2c:00:69:e8:78:5d:2f:2b:b0:95:14:e3:a4:
                    39:fa:20:b7:33:61:19:9e:c5:cf:0c:53:95:83:61:
                    c8:b1:85:f2:13:ac:03:d9:09:c8:48:b4:c0:39:24:
                    63:28:40:4a:94:fb:67:39:47:41:17:c8:8c:b0:03:
                    41:dc:c5:5c:84:68:d3:b2:e6:c8:4a:c1:23:eb:4f:
                    25:cf:06:2a:4c:71:7a:67:4d:3f:af:f8:7e:f0:f6:
                    1f:0d:22:a7:a5:21:a0:bc:00:d8:f4:4e:9e:dc:23:
                    4c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:5D:75:89:A5:9D:C1:54:1C:25:7C:FA:5D:19:1C:F7:49:FA:21:BC
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c6b70dc3-1272-46d7-ab2b-23f8bc752905.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1eb4::/47

    Signature Algorithm: sha256WithRSAEncryption
         60:e2:0b:c8:38:a9:83:49:be:dc:32:0a:5c:ba:e7:06:12:90:
         67:bc:9c:fb:e0:50:c7:2b:6b:73:4d:48:98:00:fa:94:8b:aa:
         ba:4a:6e:6d:be:16:72:af:a9:f1:05:e2:c2:c3:66:ff:ec:6f:
         68:33:01:b1:96:dd:c8:18:2b:71:4b:52:89:6d:e1:af:c5:ec:
         44:af:7c:0a:1c:e3:5f:02:bf:6b:e6:90:73:0d:a3:07:3e:60:
         20:e6:5c:cd:5e:41:d8:de:2a:e9:68:92:9f:28:bb:1c:f9:e9:
         3a:f1:03:ad:17:9f:7f:88:4f:ea:8a:ec:ca:3c:ae:37:b6:2e:
         f8:6c:89:58:2b:77:b5:b4:6c:84:b0:52:ce:28:4a:7b:09:aa:
         41:de:af:a0:3f:ea:83:b3:68:c2:27:6d:08:5b:53:d6:b3:b3:
         62:17:d6:d1:54:90:54:fa:42:43:ca:77:c2:e0:ca:e5:b2:24:
         a4:14:5e:97:ab:20:83:21:dc:fa:d1:e4:5b:a9:5d:e8:ed:66:
         e0:86:44:c4:db:b2:9d:5f:00:bc:aa:9c:0c:f7:ba:39:a7:1c:
         79:97:83:ae:56:25:ba:38:70:1b:67:6e:81:d1:2f:6e:26:b8:
         67:ab:9f:08:fb:f4:59:a5:d3:4e:0d:1f:80:b4:7d:49:37:d3:
         98:d1:41:67
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jan 2 09:30:01 2026 by rpki-client